{"apiVersion":"1.0","identifier":"CVE-2026-74652","description":"In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ The RS485 trigger hrtimers are embedded in the devm-managed port and can fire after it is freed. The IRQ handler can arm a timer, so free the IRQ first and then cancel both timers. Complete the RS485 stop without arming a timer, and cancel the timers in remove() for the suspend-then-unbind path, where shutdown is not called. This issue was found by an in-house static analysis tool.","publishedAt":"2026-08-22T16:16:38","lastModifiedAt":"2026-08-25T06:18:45","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-74652","cvssScore":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","epssProbability":0.00127,"riskScore":0.79,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-74652","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-74652","en":"https://www.redsauce.net/en/cves/CVE-2026-74652","fr":"https://www.redsauce.net/fr/cves/CVE-2026-74652","pt":"https://www.redsauce.net/pt/cves/CVE-2026-74652","de":"https://www.redsauce.net/de/cves/CVE-2026-74652","sk":"https://www.redsauce.net/sk/cves/CVE-2026-74652","el":"https://www.redsauce.net/el/cves/CVE-2026-74652"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-74652"}}